Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eUJL_txvVLsQOgqcf9pAlbpuR6M.roa
File: eUJL_txvVLsQOgqcf9pAlbpuR6M.roa (raw, json)
Hash identifier: DPYoDvshR0d8Gva4BBMQhEiF7OAX/RGqc1isz9XgvUM=
Subject key identifier: 79:42:4B:FE:DC:6F:54:BB:10:3A:0A:9C:7F:DA:40:95:BA:6E:47:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DA1A0BBFE8142FB35618DFD1EA96DBCA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eUJL_txvVLsQOgqcf9pAlbpuR6M.roa
Signing time: Tue 13 Feb 2024 08:41:22 +0000
ROA not before: Tue 13 Feb 2024 08:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.84.89.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.239.0/24 maxlen: 24
95.214.24.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
178.215.236.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
185.226.173.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:a0:bb:fe:81:42:fb:35:61:8d:fd:1e:a9:6d:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 13 08:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79424bfedc6f54bb103a0a9c7fda4095ba6e47a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:e2:94:5f:b8:1c:e9:ba:22:ca:c0:af:e8:
90:10:60:ec:33:1d:c1:e9:73:c4:7f:37:a4:3e:4b:
01:5f:48:9c:45:b0:23:67:21:c2:b0:f8:c5:11:67:
1c:4a:47:4f:0a:d6:87:58:9f:88:c4:f4:9d:50:fe:
75:77:88:cb:98:2b:73:4d:0d:09:09:5f:13:04:40:
53:21:75:fa:84:d6:4f:34:5f:74:b5:03:a5:9b:e7:
60:56:2e:27:dc:0a:82:33:c0:3c:65:92:28:81:94:
2e:f8:1d:b5:98:14:59:fd:d3:55:77:93:ca:c9:73:
22:b5:b8:ff:29:3b:91:97:b3:da:ab:05:64:76:da:
4e:5e:e3:9c:45:b9:b4:19:dc:bf:9b:ca:c0:5d:e4:
f7:d2:c9:7f:04:a1:32:0f:46:97:66:49:18:79:02:
1b:c3:d9:0b:e2:41:dd:a4:f8:64:02:99:ce:de:08:
15:65:8c:66:b8:61:13:40:73:72:a2:af:0e:84:ef:
28:e8:77:94:54:52:64:fb:22:2d:65:9c:39:da:9c:
c3:52:97:ad:27:95:22:5e:3e:b9:2c:75:42:f8:40:
7e:fa:73:de:0f:e0:da:21:aa:d1:75:cc:94:7e:2c:
a4:ca:ed:c2:fa:d5:f5:3d:8f:a7:13:e7:a0:f2:33:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:4B:FE:DC:6F:54:BB:10:3A:0A:9C:7F:DA:40:95:BA:6E:47:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eUJL_txvVLsQOgqcf9pAlbpuR6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
45.151.89.0/24
87.120.87.0/24
87.121.45.0/24
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.239.0/24
95.214.24.0/24
147.78.101.0-147.78.102.255
171.22.72.0/22
178.215.224.0/24
178.215.236.0/24
185.216.84.0/22
185.218.84.0/22
185.226.173.0/24
185.252.176.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:59:f3:42:dd:10:27:4e:45:0f:a4:37:dd:60:a6:87:59:25:
e2:69:1e:7a:91:16:36:9f:5b:1d:37:c7:df:a7:76:d2:01:83:
b8:b2:f4:92:7c:07:2b:89:23:21:17:1c:cc:fe:86:12:56:53:
9b:b5:3c:5f:a4:3b:da:ba:2d:cc:fd:60:ba:ff:ca:3f:fa:7f:
ed:f8:95:d1:b7:07:a5:bd:09:3a:8f:2a:fc:aa:f6:17:04:41:
3d:02:da:1f:1f:01:76:13:8a:b4:2f:56:54:f4:58:e0:3b:d2:
2b:bf:35:e6:3a:11:12:97:50:fd:68:fc:82:81:c6:ed:91:c9:
f1:40:15:68:01:af:9e:0b:a2:f2:e5:70:a7:2e:42:17:dc:eb:
15:7e:1b:16:22:e6:93:44:98:e8:a1:9e:c3:80:99:2b:ff:06:
51:d7:77:0c:95:8b:14:1a:8f:92:36:7e:94:67:38:43:dd:cb:
3d:cf:60:b5:c7:a5:99:83:d6:72:de:8b:2a:d9:d1:d7:b6:4c:
58:bf:cd:84:fb:1c:7b:04:d3:d8:fa:cb:f2:77:14:db:a4:fc:
81:45:07:dd:b6:e2:d1:bc:52:46:3a:03:6e:d1:92:33:ef:66:
51:1a:90:46:64:8d:0e:0d:8a:bc:75:3e:9c:54:f9:a3:05:2f:
c8:38:ef:9c
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAY2hoLv+gUL7NWGN/R6pbbymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMjEzMDg0MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQyNGJmZWRjNmY1NGJiMTAzYTBhOWM3ZmRhNDA5NWJhNmU0N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc7ilF+4HOm6IsrAr+iQEGDsMx3B
6XPEfzekPksBX0icRbAjZyHCsPjFEWccSkdPCtaHWJ+IxPSdUP51d4jLmCtzTQ0J
CV8TBEBTIXX6hNZPNF90tQOlm+dgVi4n3AqCM8A8ZZIogZQu+B21mBRZ/dNVd5PK
yXMitbj/KTuRl7PaqwVkdtpOXuOcRbm0Gdy/m8rAXeT30sl/BKEyD0aXZkkYeQIb
w9kL4kHdpPhkApnO3ggVZYxmuGETQHNyoq8OhO8o6HeUVFJk+yItZZw52pzDUpet
J5UiXj65LHVC+EB++nPeD+DaIarRdcyUfiykyu3C+tX1PY+nE+eg8jPTXwIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFHlCS/7cb1S7EDoKnH/aQJW6bkejMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZVVKTF90eHZWTHNRT2dxY2Y5cEFsYnB1UjZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAC1UWQME
AC2XWQMEAFd4VwMEAFd5LQMEAFd53QMEAVx3xAMEAl6aoAMEAF6c7wMEAF/WGDAM
AwQAk05lAwQAk05mAwQCqxZIAwQAstfgAwQAstfsAwQCudhUAwQCudpUAwQAueKt
AwQAufywAwQAwjfgMA0GCSqGSIb3DQEBCwUAA4IBAQA7WfNC3RAnTkUPpDfdYKaH
WSXiaR56kRY2n1sdN8ffp3bSAYO4svSSfAcriSMhFxzM/oYSVlObtTxfpDvaui3M
/WC6/8o/+n/t+JXRtwelvQk6jyr8qvYXBEE9AtofHwF2E4q0L1ZU9FjgO9IrvzXm
OhESl1D9aPyCgcbtkcnxQBVoAa+eC6Ly5XCnLkIX3OsVfhsWIuaTRJjooZ7DgJkr
/wZR13cMlYsUGo+SNn6UZzhD3cs9z2C1x6WZg9Zy3osq2dHXtkxYv82E+xx7BNPY
+svydxTbpPyBRQfdtuLRvFJGOgNu0ZIz72ZRGpBGZI0ODYq8dT6cVPmjBS/IOO+c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:15 2024 by rpki-client on console-fra.rpki-client.org